CVEvulnerability
CVE-2025-25523
5.9 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.9 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-120
Description
Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.
Affected configurations
• trendnet teg-40128 firmware 1.00.023
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness